CVE-2020-29394
HIGH7.8EPSS 1.4%dlt-daemon - security update
Published: 11/30/2020Modified: 3/9/2026
Also known as:DEBIAN-CVE-2020-29394DEBIAN-CVE-2022-31291DLA-3231-1
Description
A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).
Affected packages (2)
- Debian/dlt-daemonfrom 0, < 2.18.5-0.3
- Debian/dlt-daemonfrom 0, < 2.18.0-1+deb10u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |